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IN THE CLAIMS : 

For the convenience of the Examiner, all pending claims of the present application are 
shown below in clean form whether or not an amendment has been made. Please refer to the 
attached sheet showing a mark-up version of the amendments to the claims. 



a processor; 

an access token communicator capable of being coupled to the processor, the access 



token communicator being adapted to read an access token; 

an input devibe capable of being coupled to the processor, the input device being 
adapted to receive verification data, the verification data confirming authorized use of the 
access token; \ 

a software system executable on the processor and including a system security process 
controlling operational access to tns processor, the software system including: 

an executable program code tn^t accesses the access token and the verification data; 

an executable program code that verifies validity of the access token using the 



verification data; \ 

an executable program code that receives a set of security policies from the access 
token in the processor in response to the verificatioir^ata; and 

an executable program code that controls acce^to resources in the processor based 
on the security policies. \ 

2. (Amended) The computer system of claim 1 furthehcomprising: 
a nonvolatile storage device operably coupled to the processor^ 

a nonvolatile storage device access password that selectively allows access to the 
nonvolatile storage device, wherein the nonvolatile storage device password is supplied in 
response to the executable program code receiving valid verification data witfi the access 
token provided. \ 



i: 



(Amended) A computer system comprising: 
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\3. (Amended) The computer system of claim 2 5 wherein at least one of the set of 
security policies is stored within the nonvolatile storage device password. 

4. \ (Amended) The computer system of claim 1, wherein at least one of the set of 
security policiessis stored on the access token. 

5. (Amended) The computer system of claim 1 wherein one of the set of security 
policies corresponds teethe verification data. 

6. (Amended) \ computer system comprising: 
a processor; \ 

an access token communicator capable of being coupled to the processor, the access 
token communicator being adaptecrsto read an access token; 

an input device capable of ofedng coupled to the processor, the input device being 
adapted to receive verification data, th\ verification data confirming authorized use of the 
access token; \ 

a software system executable on the processor and including a system security process 
controlling operational access to the processor, tfte software system including: 

an executable program code that accesses tnfe access token and the verification data; 

an executable program code that verifies validity of the access token using the 
verification data; \ 

an executable program code that sets security policies in the processor, wherein one of 
the one or more policies includes a BIOS control information that is used to configure the 
computer system; and \ 

an executable program code that controls access to resources in the processor based 
on the security policies. \ 

7. (Amended) The computer system of claim 6 wherein ths BIOS control 
information further includes password change information, the password chan&e information 
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including one or more password change settings for a user using the one or more security 
policies. 



a processor; 

an access token communicator capable of being coupled to the processor, the access 
token communicatorbeing adapted to read an access token; 

an input deviceScapable of being coupled to the processor, the input device being 
adapted to receive verification data, the verification data confirming authorized use of the 
access token; \ 

a software system executable on the processor and including a system security process 
controlling operational access to tWs processor, the software system including: 

an executable program code tftat accesses the access token and the verification data; 

an executable program code tn^t verifies validity of the access token using the 
verification data; \ 

an executable program code that sets security policies in the processor; and 

an executable program code that controlk access to resources in the processor based 
on the security policies; and \ 

a display device, wherein one of the one or inore security policies includes one or 
more interface settings that control a desktop presentation^on the display device. 

9. The computer system of claim 2 wherein a password corresponding to the 
nonvolatile storage device access password is stored on the accesVtoken. 

10. The computer system of claim 2 wherein one or more bytes of the nonvolatile 
storage device access password are in a non-keyboard enterable format. \ 

1 1 . The computer system of claim 1 wherein the access token fncludes one or 
more bytes of data in a non-keyboard enterable format. \ 



8. 



(Amended) A computer system comprising: 
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12. The computer system of claim 1 wherein the verification data includes 
biometric crata supplied by a user. 



13. The computer system of claim 1 wherein the input device includes a keyboard 
and the verification^data includes a personal identification number. 

14. (Amended) A computer system comprising: 
one or more processors; 

memory electrically interconnected to the one or more processors; 

an operating system forVontrolling the operation of the one or more processors; 

an access token communication device electrically interconnected to at least one of 
the one or more processors, the access token communication device being communicatively 
operable with an access token; 

an input device electrically interconnected to at least one of the one or more 
processors, the input device operable to transmit a security code from a user to the one or 
more processors; 

a nonvolatile storage device electrically interconnected to at least one of the one or 
more processors, the nonvolatile storage device including a nonvolatile memory; 

a set of security policies associated with the operating system, the operating system 
operable to receive the security code for selectively enabling the set of security policies to 
limit access to the computer system; and 

the operating system permitting access to the nonvolatile storage device and the one 
or more processors if the security code and the set of security policies match an authorization 
data stored in the nonvolatile memory. 



15. (Amended) The computer system of claim 14 wherein\the access token 
further includes verification data, the verification data operable to provide the security 
policies to the nonvolatile memory if the security code matches an authentication^code stored 
in the access token. 
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16. (Amended) The computer system of claim 14 wherein the operating system 
includes\a BIOS and the BIOS is stored in the nonvolatile memory that is electrically 
interconnected to the one or more processors. 

17. 'Ehe computer system of claim 14 wherein the access token communication 
device includes a smart card communication device. 

18. The computer system of claim 14 wherein the access token communication 
device includes network\circuitry that is adapted to receive signals from one or more 
computers interconnected orka computer network. 

19. The computer system of claim 14 wherein the access token communication 
device includes a modem that recei\es signals from a communications line. 

20. The computer system of Vjaim 14 wherein the input device is a keyboard. 

\ 

21. The computer system of cl^im 14 wherein the input device includes a 
biometric data reading device. 

22. The computer system of claim 14 w\erein the biometric data reading device 
includes a fingerprint scanner. 

23. The computer system of claim 14 wherein ft^e biometric data reading device 
includes a retinal scanning device. 

24. The computer system of claim 14 wherein the nonvolatile storage device 
includes a hard disk drive. 
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25. The computer system of claim 14 further comprising a data access code stored 
in the nonvolatile memory, wherein a data request code corresponding to the data access code 
alters a state of the nonvolatile storage device. 

26. (Amended) A method for accessing a computer system, said method 
comprising: \ 

providing a computer system, the computer system including: 
one or more processors; 

a memory operably coUpled to the one or more processors; 

an operating system for controlling the operation of the one or more processors; 

an access token reading device that is adapted to read information stored on an access 
token; \ 

an input device that is adapted ro transmit verification data to the operating system, 
the verification data confirming authorized \ise of the access token; 

a nonvolatile storage device operably coupled to the memory; 

a nonvolatile storage device access password that selectively allows access to the 
nonvolatile storage device, wherein the nonvolatile storage device password is supplied in 
response to the access token reading device readingvan access token and the input device 
receiving verification data; \ 

storing a master password on the access token; \ 
storing a nonvolatile storage device password on the access token; and 
comparing the verification data to the master password and the nonvolatile storage 
device password for access to the computer system. \ 

27. The method of claim 26 further comprising: \ 

storing a password corresponding to the nonvolatile storage device password on the 
nonvolatile storage device. \ 
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28. (Amended) A method for protecting information stored in an information 
handling system, said method comprising: 

readink an access token containing a security policy for the information handling 
system; \ 

requesting ah authentication password from a user; 

authenticating the use of the access token by comparing the password to the security 
policy; \ 

setting a security policy in the information handling system; and 
unlocking a nonvolatile\storage device on the information handling system. 

29. (Amended) A method for assembling a computer system, said method 
comprising: \ 

receiving a list of components foV assembling the computer system; 
receiving one or more security policies; 

configuring the computer system using the one or more security policies; and 
accessing the computer system with a\user input password combined with a token 

access password such that the combined passwords match the one or more security policies 

configured in the computer system. \ 

30. The method of claim 29 further comprising: 
initializing a system password installed on the computer system. 

3 1 . The method of claim 29 further comprising: \ 

providing a nonvolatile storage device for the computer system, wherein the 
nonvolatile storage device includes a nonvolatile storage device passWrd; and 
initializing the nonvolatile storage device password. \ 

32. The method of claim 29 wherein the configuring includes modifying a 
nonvolatile memory installed in the computer system. \ 
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33. The method of claim 29 further comprising: 

retaining a copy of the nonvolatile storage device password at a location removed 
from the computer system. 

34. (Amended) The method of claim 29 further comprising: 

configuring an access token for the computer system, the access token including the 
security policies and tnte passwords associated with the computer system. 

35. (Amended) A method of using an access token, said method comprising: 
transferring one or more passwords from the access token to a computer system; and 
receiving a user input password at the computer system and 

matching a computer systeta password with the combined user password and the one 
or more passwords from the access tcdcen. 

36. (Amended) The methockof claim 35 wherein the transferring step is 
performed in response to an access code received by the access token. 

37. The method of claim 35 wherein one of the one or more passwords 
corresponds to a computer system password installed on the computer system. 

38. The method of claim 35 wherein otae of the one or more passwords 
corresponds to a nonvolatile storage device password Ninstalled on a nonvolatile storage 
device. \ 



40. An access token for use with a computer sysrem, said access token 
comprising: \ 

one or more security policies adapted to be used by a computer 9y stem > wherein the 
one or more security policies are stored in an encrypted format; and \ 




Please cancel Claim 39 without prejudice or disclaimed. 
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an access code stored on the access token, wherein the access token transmits the one 
or more securir^ policies in response to receiving a data stream corresponding to the access 
code. 

41. (Amended) A computer operable medium for protecting a computer system, 
said computer operable meahirn comprising: 

means for reading an access token; 
means for receiving an authentication password; 
means for verifying the validity of the access token based on the authentication 
password; 

means for setting security policies in^the information handling system; and 
means for unlocking a nonvolatile storage device on the information handling system. 

42. (Amended) An information handling system comprising: 
means for reading an access token; 
means for receiving an authentication password; 

means for verifying the validity of the access tokenN^ased on the authentication 
password; 

means for setting security policies in the information handling System; and 
means for unlocking a nonvolatile storage device on the information handling system. 



REMARKS 

Applicants have carefully reviewed this Application in light of the Office Action 
mailed March 13, 2002. Claims 1-42 are pending in this Application. Claims 1 - 5, and 9 - 
42 are rejected. Claims 6 - 8 are objected to as being dependent upon a rejected claim. 
Applicants have cancelled Claim 39 without prejudice or disclaimer. Applicants have 
amended Claims 1 -8, 14 - 16, 26, 28, 29, 34 - 36, 41 and 42 to further define that which 
Applicants' regard as their invention and respectfully request reconsideration and favorable 
action in this case. 
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